This policy explains what personal data DevPlusOps LLC ("we", "us") handles when you use mem-sync or visit this website, why, and what you can do about it. The short version: we handle only what is needed to run mem-sync for your team, and never your prompts.
1. Who we are
DevPlusOps LLC provides mem-sync. For content your team shares in a workspace, your organisation decides what is shared and is the controller; we process it on its behalf. For account and website data, we are the controller.
2. What we collect
Account data: your name, email address, role and the sign-in method you use.
Workspace content: notes and session summaries from folders a member links to a space, the file paths they mention, the author’s name, the git branch, commit, repository address and pull request a note was written on (each member can turn this off per folder), and questions asked with Ask.
Technical data: the version of the plugin and agent, sync times and errors, IP address and request logs, kept to run and secure the service.
Website and portal analytics: we use PostHog (US) to count the pages viewed on this website and in the portal, the links and buttons clicked on this website, and a few sign-up steps: clicking Sign up free or Book an onboarding call, asking for a sign-in email, creating a team and creating a machine key. It sets no cookies and stores nothing in your browser, records no sessions, and never receives names, email addresses, team names or addresses, keys or note content. PostHog receives your IP address, uses it to work out your country, and keeps it with these events. With Do Not Track on in your browser, nothing is sent.
Billing data: none today; we will describe any billing data here before paid plans are offered.
3. What we never collect
The prompts you type into Claude Code, raw tool output, file contents, notes from folders nobody linked, and anything at all while sync is paused. These stay in claude-mem on your own machine.
4. How we use it
To run mem-sync: store and sync notes, show catch-up, answer Ask questions, manage people and access, and send service emails. To keep it secure and fix problems. We do not sell personal data, show ads, or use workspace content to train AI models.
5. Legal bases
Where data protection law such as the GDPR applies, we rely on performing our contract with you or your organisation and our legitimate interest in securing and improving the service. Where we need consent, we ask for it.
7. Where it is stored
Hosted plans store workspace content in Hetzner, Ashburn, Virginia (US). Workspaces that connect their own Postgres keep it in that database. Self-hosted workspaces keep it on your servers. Where data moves between countries, we use safeguards such as standard contractual clauses.
8. How long we keep it
Workspace content is kept until a member deletes it or the workspace closes; after closing, it is deleted within 30 days. Request logs are kept for 30 days.
9. Your rights
Depending on where you live, you can ask to access, correct, export or delete your personal data, object to or restrict some uses, and complain to your data protection authority. For workspace content, ask your workspace admin first, since your organisation controls it. Email [email protected] for anything else; we reply within 3 business days.
10. Security
Data is sent over HTTPS, every request is checked against the person’s access, and access to production systems is limited to staff who need it. See the security page for details.
11. Children
mem-sync is a tool for professional software teams and is not meant for anyone under 16.
12. Changes to this policy
We will post changes here and email workspace owners about material ones before they take effect.
Questions or requests: [email protected] · DevPlusOps LLC